Senior AWS Cloud Architect

Senior AWS Cloud Architect

Client: Federal Government

Location: Remote with occasional travel to the client site in Baltimore. Candidates must currently live within a commutable distance of the office.

Employment Type: W2 on ExpediteInfoTech's payroll. This position requires a Permanent resident or a U.S. citizen. The selected candidate will go through a Public Trust Clearance process.

Responsibilities

• Architect enterprise-level cloud infrastructures with multiple environments, serving discrete purposes, to support various sandbox, analytical, research, development, testing, and production needs of the client.
• Experience in supporting AI implementation projects is required.
• Architect prototypes to best leverage cloud architecture and available tools to meet performance management expectations.
• Architect for technology reuse, implement scalable security approaches, and optimize cloud usage.
• Work to deploy, operationalize, and maintain Government prototypes, including converting them to production tools.

Design and Govern AWS Infrastructure

• VPC design, subnet segmentation, routing, NAT gateways, and security groups
• IAM policy design aligned to least privilege principles
• Solutions architecture for new applications, including deployment strategy, service selection, and integration patterns
• Infrastructure-as-code development and maintenance (CloudFormation, Terraform, AWS CDK)
• Environment management (development, staging, production)
• Integration with enterprise security controls (e.g., Palo Alto firewalls)
• Architectural documentation to support Authority to Operate (ATO) requirements
• Cloud cost governance and optimization

CI/CD, DevSecOps, and Deployment Automation

Build and maintain automated build, test, and deployment pipelines, including:

• CI/CD pipeline design and implementation (CodeCommit, GitLab CI, GitHub Actions, AWS CodePipeline)
• Container image creation and management (Docker, ECS, EKS)
• Security scanning integration (SAST, DAST, dependency scanning, container scanning)
• Release management across dev/test/prod environments
• Infrastructure deployment automation
• Secrets management and secure configuration practices
• Infrastructure-as-code development and maintenance using GAO-approved tools (AWS CDK, CloudFormation).